Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-4060
HistoryAug 12, 2014 - 9:55 p.m.

CVE-2014-4060

2014-08-1221:55:07
CWE-416
[email protected]
web.nvd.nist.gov
29
cve-2014-4060
use-after-free vulnerability
mcplayer.dll
microsoft
windows media center
remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.421 Medium

EPSS

Percentile

97.3%

JSON

Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows remote attackers to execute arbitrary code via a crafted Office document that triggers deletion of a CSyncBasePlayer object, aka “CSyncBasePlayer Use After Free Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_media_centerMatch-
AND
microsoftwindows_8Match-professional
OR
microsoftwindows_8.1Match-professional
Node
microsoftwindows_media_center_tv_packMatch-
AND
microsoftwindows_7Match-sp1enterprise
OR
microsoftwindows_7Match-sp1enterprise_kn
OR
microsoftwindows_7Match-sp1enterprise_n
OR
microsoftwindows_7Match-sp1home_premium
OR
microsoftwindows_7Match-sp1home_premium_kn
OR
microsoftwindows_7Match-sp1home_premium_n
OR
microsoftwindows_7Match-sp1professional
OR
microsoftwindows_7Match-sp1professional_kn
OR
microsoftwindows_7Match-sp1professional_n
OR
microsoftwindows_7Match-sp1ultimate
OR
microsoftwindows_7Match-sp1ultimate_kn
OR
microsoftwindows_7Match-sp1ultimate_n
OR
microsoftwindows_vista

Related

zdi 1
nvd 1
nessus 1
symantec 1
openvas 1
prion 1
cvelist 1
kaspersky 1
securityvulns 1
zdi
zdi
Microsoft Windows Media Center CSyncBasePlayer Use-After-Free Remote Code Execution Vulnerability
2014-08-12 00:00:00
nvd
nvd
CVE-2014-4060
2014-08-12 21:55:07
nessus
nessus
MS14-043: Vulnerability in Windows Media Center Could Allow Remote Code Execution (2978742)
2014-08-12 00:00:00
symantec
symantec
Microsoft Windows Media Center CVE-2014-4060 Remote Code Execution Vulnerability
2014-08-12 00:00:00
openvas
openvas
Microsoft Windows Media Center Remote Code Execution Vulnerability (2978742)
2014-08-13 00:00:00
prion
prion
Design/Logic Flaw
2014-08-12 21:55:00
cvelist
cvelist
CVE-2014-4060
2014-08-12 21:00:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2014-09-15 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.421 Medium

EPSS

Percentile

97.3%

JSON
Related for CVE-2014-4060
zdi1nvd1nessus1symantec1openvas1prion1cvelist1kaspersky1securityvulns1